jetlib.sec » Tags » tex

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

17 items tagged "tex"

Related tags: dvi [+], vulnerability [+], code execution [+], red hat security [+], lib [+], integer overflow vulnerability [+], font metrics [+], dospecial [+], buffer overflow vulnerability [+], based buffer overflow [+], user [+], marc schoenefeld [+], ludwig nussel [+], dvi files [+], dan rosenberg [+], bibliography files [+], application crash [+], vulnerabilities [+], usn [+], retired [+], parsing [+], font data [+], cve [+], bugtraq [+], live [+]

• February 15, 2012
• 14:45

  Red Hat Security Advisory 2012-0137-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2012-0137-01 - TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. The texlive packages provide a number of utilities, including dvips. TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by a TeX Live utility, it could cause the utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility.

  Tags:  live lib tex based-buffer-overflow font-metrics red-hat-security  

• 14:45

  Red Hat Security Advisory 2012-0137-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2012-0137-01 - TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. The texlive packages provide a number of utilities, including dvips. TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by a TeX Live utility, it could cause the utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility.

  Tags:  live lib tex based-buffer-overflow font-metrics red-hat-security  

• 14:45

  Red Hat Security Advisory 2012-0137-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2012-0137-01 - TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent file as output. The texlive packages provide a number of utilities, including dvips. TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code: Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by a TeX Live utility, it could cause the utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility.

  Tags:  live lib tex based-buffer-overflow font-metrics red-hat-security  

• June 24, 2010
• 0:00

  Vuln: TeX Live '.dvi' File Parsing (CVE-2010-0827) Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live '.dvi' File Parsing (CVE-2010-0827) Remote Code Execution Vulnerability

  Tags:  live dvi tex code-execution cve vulnerability  

• 0:00

  Vuln: RETIRED: TeX Live DVI Font Data Parsing Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  RETIRED: TeX Live DVI Font Data Parsing Buffer Overflow Vulnerability

  Tags:  live tex retired buffer-overflow-vulnerability font-data parsing  

• May 25, 2010
• 0:00

  Vuln: TeX Live DVI Font Data Parsing Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live DVI Font Data Parsing Buffer Overflow Vulnerability

  Tags:  dvi live tex buffer-overflow-vulnerability  

• 0:00

  Vuln: TeX Live '.dvi' File Parsing Unspecified Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live '.dvi' File Parsing Unspecified Remote Code Execution Vulnerability

  Tags:  live dvi tex code-execution vulnerability  

• 0:00

  Vuln: TeX Live 'dospecial.c' '.dvi' File Parsing Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live 'dospecial.c' '.dvi' File Parsing Integer Overflow Vulnerability

  Tags:  dospecial live tex integer-overflow-vulnerability  

• May 18, 2010
• 0:00

  Vuln: TeX Live '.dvi' File Parsing Unspecified Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live '.dvi' File Parsing Unspecified Remote Code Execution Vulnerability

  Tags:  live dvi tex code-execution vulnerability  

• 0:00

  Vuln: TeX Live 'dospecial.c' '.dvi' File Parsing Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live 'dospecial.c' '.dvi' File Parsing Integer Overflow Vulnerability

  Tags:  dospecial live tex integer-overflow-vulnerability  

• May 12, 2010
• 0:00

  Vuln: TeX Live '.dvi' File Parsing Unspecified Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live '.dvi' File Parsing Unspecified Remote Code Execution Vulnerability

  Tags:  live dvi tex code-execution vulnerability  

• 0:00

  Vuln: TeX Live DVI Font Data Parsing Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live DVI Font Data Parsing Buffer Overflow Vulnerability

  Tags:  dvi live tex buffer-overflow-vulnerability  

• May 06, 2010
• 19:41

  USN-937-1.txt

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 937-1 - It was discovered that TeX Live incorrectly handled certain long .bib bibliography files. If a user or automated system were tricked into processing a specially crafted bib file, an attacker could cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS, 9.04 and 9.10. Marc Schoenefeld, Karel Å rot and Ludwig Nussel discovered that TeX Live incorrectly handled certain malformed dvi files. If a user or automated system were tricked into processing a specially crafted dvi file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Dan Rosenberg discovered that TeX Live incorrectly handled certain malformed dvi files. If a user or automated system were tricked into processing a specially crafted dvi file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.

  Tags:  user tex dvi marc-schoenefeld ludwig-nussel dan-rosenberg application-crash bibliography-files dvi-files  

• 19:41

  USN-937-1.txt

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 937-1 - It was discovered that TeX Live incorrectly handled certain long .bib bibliography files. If a user or automated system were tricked into processing a specially crafted bib file, an attacker could cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS, 9.04 and 9.10. Marc Schoenefeld, Karel Å rot and Ludwig Nussel discovered that TeX Live incorrectly handled certain malformed dvi files. If a user or automated system were tricked into processing a specially crafted dvi file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Dan Rosenberg discovered that TeX Live incorrectly handled certain malformed dvi files. If a user or automated system were tricked into processing a specially crafted dvi file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program.

  Tags:  user tex dvi marc-schoenefeld ludwig-nussel dan-rosenberg application-crash bibliography-files dvi-files  

• 8:00

  Bugtraq: [USN-937-1] TeX Live vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  [USN-937-1] TeX Live vulnerabilities

  Tags:  bugtraq live tex usn vulnerabilities  

• 0:00

  Vuln: TeX Live 'dospecial.c' '.dvi' File Parsing Integer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live 'dospecial.c' '.dvi' File Parsing Integer Overflow Vulnerability

  Tags:  dospecial live tex integer-overflow-vulnerability  

• 0:00

  Vuln: TeX Live '.dvi' File Parsing Unspecified Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  TeX Live '.dvi' File Parsing Unspecified Remote Code Execution Vulnerability

  Tags:  live dvi tex code-execution vulnerability